Content library

Ilman valvontaa jäävät laitteet

11.2.8

ISO 27001

There are separate instructions for staff to use mobile devices. The instructions cover:

restrictions on installing software and using various services on your organization's devices
procedures for the registration of new devices
requirements for physical protection of equipment and installation of updates
access control requirements
protecting your organization’s data with encryption, malware protection, and backup
the ability of the organization to remotely control the device

See an example process description from task's page

Connected other frameworks and requirements:

11.2.6: Security of equipment and assets off-premises

ISO 27001

6.2.1: Mobile device policy

ISO 27001

10.1.1: Policy on the use of cryptographic controls

ISO 27001

11.2.8: Unattended user equipment

ISO 27001

12.6.2: Restrictions on software installation

ISO 27001

The Data Protection Officer (or other responsible person) has drawn up operating instructions for personnel handling personal data. In addition, the Data Protection Officer is ready to advise the controller, personal data processing partners or their own staff on compliance with GDPR or other data protection requirements.

See an example process description from task's page

Connected other frameworks and requirements:

29. Processing under the authority of the controller or processor

GDPR

7.2.2: Information security awareness, education and training

ISO 27001

18.1.4: Privacy and protection of personally identifiable information

12.1.1: Documented operating procedures

ISO 27001

11.2.8: Unattended user equipment

ISO 27001

No items found.

Personnel guidelines for safe usage of mobile devices

Connected other frameworks and requirements:

Personnel guidelines for safe processing of personal and confidential data

Connected other frameworks and requirements:

Subscribe to Academy today

Webinars

Videos

Helps

Blogs

Content library